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ABSTRACT 


This thesis presents the methodology for a detailed 
vulnerability assessment of a generic helicopter in the 
conceptual/preliminary design stage. The intent of this 
thesis is to provide a workable and understandable example 
of a vulnerability assessment. Towards that end, the single 
hit vulnerability of a helicopter to a 100 grain fragment 
is determined using the methodology presented in the 
textbook, The Fundamentals of Aircraft Combat Survivability 
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I. INTRODUCTION 


This case study is based on the concepts and 
methodology presented in The Fundamentals of Aircraft 
Combat Survivability Analysis and Design [Ref.1], by Dr 
Robert E. Ball, Professor of Aeronautics at the Naval 
Postgraduate School (NPS) in Monterey, California. As 
stated in Dr Ball's book, "The cost of modern aircraft 
weapon systems, coupled with the requirement that the 
system be effective, makes imperative the consideration of 
the aircraft's survivability throughout the life cycle of 
the system." The requirement for consideration of 
survivability throughout the life cycle, expressly implies 
the requirement for a comprehensive survivability program 
from day one of the conceptual/preliminary design phase. 

In order for this to happen, aircraft designers and others 
involved with the design and development of an aircraft 
must be made aware of the ways to enhance survivability and 
the methodology for assessing it. This case study was 
developed to give these people an example of the first step 
of a survivability program, namely a vulnerability study. 

The study is performed on a generic aircraft of the 
author's own design in order to eliminate any problem of 
classificatwon. Tha ai resart was designed to fulfill the 
requirements of AE4306 "Helicopter Design", taught by Prof. 


Donald Layton. This course is based on a helicopter design 


1) 


manual written by Prof. Layton [Ref. 2] which provides the 
historical data and corporate knowledge by which most 
helicopters are designed today. Helicopter conceptual 
design is far less definitive than the fixed wing design 
procedure, therefore performance specifications are 
generally all that are supplied, with just about everything 
else left to the imagination of the designer. 

This study attempts a single hit vulnerability 
assessment of a combat helicopter. It is intended as a 
learning experience for the reader. Therefore, in the 
interest of accuracy, most if not all of the background 
iaeaema tion which is required in order to fully understand 
the case study was paraphrased and in some cases copied 
directly from one of three references. This is especially 
true in Chapter II where most of the groundwork is laid. 
The first reference is listed above as Dr Ball's book. The 
second is an excellent case study of a fixed wing attack 
aircraft by Lt Robert Novak [Ref. 3] and the third 
reference is the DOD MIL STD 2069 [Ref. 4] which provides 
the requirements and guidelines for establishing and 
conducting aircraft survivability programs. It is not this 
author's intention to take credit in any way for 
information derived from these three references, only to 
use the information as a basis on which to build the bulk 


of this case study. 
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II. GENERAL SURVIVABILITY PROGRAM OVERVIEW 


Aircraft combat survivability is defined as "the 
capability of an aircraft to avoid and/or withstand a man 
made hostile environment." In an effort to understand and 
quantify survivability it is divided into two categories, 
vulnerability, defined as an aircraft's inability to remain 
under controlled flight given that it is hit by some damage 
mechanism and susceptibility, defined as the inability of 
an aircraft to avoid being damaged in the pursuit of its 
mission. By definition vulnerability is something that is 
designed into the aircraft and remains with the aircraft 7 
regardless of location whereas susceptibility is dependent 
on a variety of outside factors such as the physical 
environment and the threat environment. These major 
concepts are depicted in Figure 2.1.[{Ref.1l:p2] 

A complete survivability program must include all the 
factors that affect the aircraft's susceptibility and its 
vulnerability. The tasks of a complete survivability 
program are defined in MIL-STD-2069. These include: 
mission threat analysis 
aircraft description 
vulnerability assessment 
susceptibility assessment 
survivability assessment 


trade-off studies 
testing/final aircraft asian 
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Figure 2.1 Major Concepts of Aircraft Survivability 
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The general flow of these tasks is depicted in Figure 2.2. 
[Ref.1:p9] Each of the above tasks will be explained in 


more complete detail in the following paragraphs. 


A. MISSION THREAT ANALYSIS 

The ground work for deciding what is required for an 
aircraft on the drawing board is deciding first what will 
be required of that aircraft in combat. Specifically this 
includes defining each operational mode of the aircraft 
required by the specific mission. Aircraft configuration, 
operating conditions/environmental factors, ordnance 
loading, tactics, aircraft performance characteristics all 
define the operational mode. Secondly, the expected 
threats to be encountered must be listed, as well as the 
characteristics of the individual threat systems. Future 
threat systems must also be considered. Finally, the first 
two steps are combined to arrive at the encounter 
conditions. These encounter conditions are then used as a 
basis for the vulnerability and susceptibility assessments 
and the trade-off studies. (Ref.1:p115] 

A mission threat analysis can be broken down into three 
distinct areas. The first of these would be the aircraft 
theaters of operation and types of missions, and the flirgne 
and operating conditions, inoue airspeeds, altitudes, 
configurations, and types of electromagnetic radiation, for 


each mission type. 
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Figure 2.2 Survivability Element Flow 
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Second is the definition of the threat environment. 
Included in this definition are the operating conditions 
and threat envelopes for all weapon systems that one can 
expect to encounter for each mission and theater. The last 
of these areas involves evaluating the information gleaned 
from the other two areas in order to determine the 
likelihood and conditions of any encounter with hostile 


meee. 


B. AIRCRAFT DESCRIPTION 

Vulnerability and susceptibility assessments require 
that an aircraft description be available. As much 
technical and functional data as possible must be 
assembled if these assessments are to be accurate. This 
description must include general characteristics, such as 
whether the aircraft is fixed or rotary wing, and more 
specific information, such as a geometric description and 
performance parameters, and complete system descriptions of 
the important systems, such as structural, propulsion, 
power train and rotor blade, flight control, fuel, crew and 


armament. 


Ge VULNERABILITY PROGRAM 
As stated earlier, the vulnerability of an aircraft is 
a measure of that aircraft's inability to maintain 


controlled flight given that it is hit be some damage 
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mechanism. Failing this, the designers' objective should be 
a graceful degradation in system performance to allow for a 
successful egress, first from the hostile environment and 
then from the aircraft. In other words, the more vulnerable 
the aircraft is, the easier it is to kill when hit. A 
complete vulnerability analysis is made up of several 
components. The first of these is the identification of the 
aircraft's critical components followed by a vulnerability 
assessment, and finally recommendations on how to reduce 
the vulnerability of the aircraft. 

A critical component is defined as any component whose 
loss or sce would lead to an aircraft kill. Therefore, 
it is essential that all critical components in an aircraft 
be identified. This identification is performed ina 
process referred to as the critical component analysis. A 
general procedure for determining these critical components 
as is (1) a selection of the aircraft kill levels or 
categories to be considered, (2) an assembly of the 
technical and functional description of the aircraft and 
(3) the determination of the critical components of the 
aircraft and their damage caused failure modes for the 
selected kill levels. 

Kill categories measure the seriousness of aircraft 
damage, as well as how graceful the degradation of system 
operation is. They are divided into an attrition kill, a 


mission abort kill, and a forced landing kill. An attrition 


a7 


kill can be “further divided into levels; (1) KK Kia in 
which the aircraft is destroyed immediately after being 
hit, (2) K kill in which the aircraft falls out of manned 
control within 30 seconds after being hit, (3) A kill in 
which the aircraft departs from manned control within 5 
minutes after being hit, and finally (4) B kill in which 
the aircraft falls out of manned control within 30 minutes 
after being hit. The forced landing kill is especially 
applicable to this case study as it pertains to helicopter 
aviation. This category includes any forced landing after 
being hit but prior to the time fuel is exhausted. 
Determination of the critical components of the 
aircraft and their damage-caused failure modes for the 
selected kill levels is done by first identifying the 
flight and mission essential functions an aircraft must 
perform. An example of this can be seen in Figure 
2.3.[{Ref.1:p139] From this list, the systems and 
subsystems which perform the essential functions are 
identified and used to conduct a Failure Mode and Effects 
Analysis (FMEA). This analysis is a "bottom up" approach 
which first identifies and documents all possible failure 
modes of critical systems, subsystems and their components 
and then_determines the effect of these failures upon the 
flight and mission essential functions. This particular 
approach is often used by safety analysts and safety 


engineers. An example FMEA matrix is shown in Figure 2.4. 
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[Ref.1:pl42} Following the FMEA, a Damage Mode and Effects 
Analysis (DMEA) is performed to relate system or subsystem 
component failures to combat inflicted damage. Figure 2.5 
[Ref.1:p143}] shows an example DMEA matrix and Table 2.1 
(Ref.1:p145] lists the major damage-caused kill modes for 
the primary aircraft systems. A combination of an FMEA and 
a DMEA is often called a Failure Mode, Effects and 
Criticality Analysis, or FMECA. 

Although not required by MIL STD 2069, critical 
components can be identified using a Fault Tree Analysis 
(FTA). This “top down approach", in contrast to the FMEA, 
uses logic symbology to determine what sequence of events 
or singular events will lead to an undesired event. This 
technique is illustrated in Figure 2.6. [Ref.1:p149] 

Once the critical components are identified, they can 
be represented in a clear, concise manner referred to as a 
kill tree. This "tree", shown in Figure 2.7, [Ref.1:p153} 
identifies redundant and nonredundant critical components 
by their location on the tree. A complete cut through the 
trunk of the tree is required to kill the aircraft. 
Similarly this relationship can be represented in a logical 
kill expression. 

The second step in a complete vulnerability analysis is 
referred to as a vulnerability assessment. This assessment 
is a process by which numerical values of the aircraft's 


vulnerability are computed. This procedure can be carried 
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out at various levels of detail. Specifically these levels 
are estimates, evaluations and analyses in increasing order 
of complexity and detail. Four specific measures of 
vulnerability are available for use. These are Pay! AL, 
PxyD! Pio: Pays the conditional probability that an 
alrcraft will be killed given a random hit by a damage 
mechanism. AL is defined as the aircraft's vulnerable 
area, a theoretical, nonunique area presented to the threat 
that, if hit be a damage mechanism, would result in an 
aircraft kill. Px/pts the conditional probability of an 
alrcraft kill given the nearby detonation of an HE warhead. 
Pro 1s the probability of kill given a lock on by laser 
weaponry. 

The threats and damage mechanisms that are usually 
considered in the assessment are: (1) a nonexplosive 
penetrating projectile or fragment, (2) the fragments and 
blast from a internally detonating warhead, (3) external 
blast, (4) the fragments, penetrators, and missile debris 
from externally detonating warheads, and (5) the laser. 

The damage or kill criteria for each of the failure modes 
of each critical components must be determined for these 
threats. The four criteria in use today are (1) the PR 
function, (2) the area removal criterion, (3) the energy 


density criterion and (4) the blast damage mechanism. 


These four criteria are explained in detail in Reference 1. 
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Thirdly, and perhaps most importantly ina 
vulnerability program, is the concept of vulnerability 
reduction. This reduction is a conscious effort to reduce 
whatever measure of vulnerability is used in the assessment 
of the aircraft. This reduction is achieved through the 
combination or selective use of Six specific vulnerability 
reduction concepts. These concepts are (1) component 
redundancy, (2) component location, (3) passive damage 
Suppression, (4) active damage suppression, (5) component 


shielding and (6) component elimination. 


De SUSCEPTIBILITY PROGRAM 

Once again, susceptibility refers to the inability of 
an aircraft to avoid being hit while operating within a man 
made hostile environment. Susceptibility is, 
therefore,dependent on the environment, the threat and the 
aircraft itself. In a manner very similar to that of the 
vulnerability program, a susceptibility program is 
subdivided into three major tasks. First is an essential 
elements analysis (EEA), followed by a susceptibility 
assessment, and finally recommendations for reducing the 
susceptibility of the aircraft. 

The essential elements analysis parallels the 
identification of the critical components in the 
vulnerability program when an FTA is utilized. It is a 


timewise sequence or chain of events which leads to the 


2e/ 


final undesired event in much the same manner as a FTA. An 
example EEA is provided in Figure 2.8. [Ref.1:p226] 

The susceptibility assessment is an effort to quantify 
the susceptibility of an aircraft. In this assessment, 
each important event and element, such as radar signature 
of the helicopter, the radar detection of the helicopter, 
the effectiveness of the chaff in decoying the radar 
tracker, and the effects of the helicopter maneuvers are 
modelled, and numerical values are determined for the model 
parameters. 

The final section of the susceptibility program 
outlines the six susceptibility reduction concepts. The a 
concepts are: (1) threat warning, (2) noise jammers and 
deceivers, (3) signature reduction, (4) expendables, (5) 
threat suppression and (6) tactics. These concepts must be 
evaluated and trade-off studies conducted to determine the 
consequences, both pro and con, of their incorporation. 

For example, what effect would the added weight and cost of 
a Jammer have on the overall aircraft weight, and therefore 


alrcraft performance and overall cost. 


E. SURVIVABILITY ASSESSMENT 

The survivability assessment is the culmination of the 
combined vulnerability and susceptibility assessments. It 
combines good engineering judgement with a sound 


understanding of the proposed tactics and methods of 
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Events and Elements 


peli 


Questions 





l. 


2 


bz. 


1S: 


16. 


17. 


Blast and fragments stnke the 
A/C. 

Missile warhead detonates 
within lethal range. 


Radar proximuty fuze detects 
A/C. 

Mussile propelled and guided 
to vicinity of A/C. 


Missile guidance system 
functions in flight. 

Missile motor ignites. 

Missile guidance svstem 
locked on to target’s engine 
ir. radiation. 

Target's engines within 
mussile’s neld of view. 

Enemy nghter maneuvers to put 
target into field of new and 
within maximum range. 


Target acquired by enemy 
hghicr’s onboard sensors. 


Enemv fighter goven steering 
bv ground control intercept 
(GCI) net to acquire target. 


Target A/C designated to enemy 
fighter and fighter launched. 


Fighter available to launch 
against target. 


Enemy C? net functions 
properly. 

GC picks up track on 
target A/C. 


Target designated hosule 
hy enemy commander. 
Early warming net detects and 
establishes track (course and 
specd) of target A/C. 


Yes 


Yes 


Yes 


Yes 


Yes 


Yes 


Yes 


Yes 


Yes 


Yes 


Yes 


Yes 


How many fragments hit the A/C and 
where do they hit? 

Can the onboard ECM suite inhibit 
the functioning of the proximity 
fuze? 

Will chaff decoy the fuze? 


Can the target A/C outmaneuver the 
missile? 

Are 1.r. flares effective decovs? 

Are ir. flares eflective decovs? 


Are i.r. flares effective decovs? 

ls the engine's i.r. suppressor 
effective in preventing lock-on? 

Are the engine hot parts shielded? 


Does the enemy fightcr have a 
performance edge? 

Does the target A/C have an 
offensive capability against the 
enemy fighter? 

Does the onboard ECM suite inhibit 
acquisition by the fighter’s 
radar? 

Do the tacucs place the target 
Outside sensor limits? 

ls the camouflage paint scheme 
effective against visual 
acquisition? 

Does the onboard or stand-off ECM 
Suite have a communications 
jamming capability? 

Is a fighter escort available? 

Does the onboard or stand-off ECM 
suite have a Communicauons 
jamming capability? 

Are there anv supporting forces to 
destrov the enemy fighter on the 
ground? 

Does the stand-off ECM suite have a 
communicauons jamming Capability? 

ls the target A/C casily 
detected and tracked by radar? 

Is the stand-off ECM suite 
effective against search radars? 

Does the stand-off ECM suite 
have IFFN countcrmeasures? 

Is the target A/C easily detected 
and tracked bv radar? 

Is the stand-off ECM suite 
effective against search radars? 


Figure 2.8 Example EEA Summary 
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aircraft employment. Numerous trade-off studies are 
required in order to obtain the highest survival rate while 
still performing the mission for which it was designed. 
Obviously, the most survivable aircraft in the world is the 
one sitting in the hangar far from combat. This 1s not the 
goal of any survivability program. In fact, as stated by 
Dr. Ball, "the goal of the aircraft combat survivability 
(ACS) discipline is the early identification and successful 
incorporation of those specific survivability enhancement 
features that increase the effectiveness of the weapon 
system." 

In summary this chapter has attempted a very basic 
summary of a growing discipline. It by no means even 
scratches the surface of very complex topic. The following 
chapters begin the actual case study and are an attempt to 


scratch the surface in meaningful way. 
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iii Un eALRCRAPLI 


The aircraft used for this case study was designed to 
be a generic lightweight combat helicopter. The 


requirements for the design were as follows: 


A. SUMMARY OF DESIGN REQUIREMENTS 


-TYPE Light/Medium attack 
helicopter, land based 


-PRIMARY MISSION Air-to-Ground fire 
support while operating 
within four miles of the 
forward line of own 
troops (FLOT) 


-SECONDARY MISSION Scout/Reconnaissance 
-CREW Single seat 
-MAXIMUM GROSS WEIGHT 8000+500 pounds 


-USEFUL LOAD (excluding fuel) 1500 pounds 


-MAXIMUM RANGE 250 nmi/457.2 km 
-MAXIMUM RATE OF CLIMB 2500 fpm 
-MAXIMUM FUSELAGE LENGTH Ser Lt 

-MAXIMUM ROTOR RADIUS PA) 361 

-SERVICE CEILING 14500 ft 

-HOVER IGE 8000 ft 


These requirements formed the skeletal basis from which 
a generic design, the AH-80 VIPER (Figures 3.1 through 3.3) 
was conceived. As can be seen from the above requirements, 
essential systems and subsystems such as the propulsion 


system, the armament system, the flight control system and 
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Figure 3.1 VIPER Insignia 


32 


? 


€ 


Figure 3.2 VIPER Side View 
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Figure 3.3 VIPER Front View 
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the tail rotor configuration were not specified and there- 


fore were left entirely at the discretion of the author. 


B. FINAL DESIGN/PERFORMANCE SUMMARY 


Overall Aircraft 


main rotor power (function of A/S) 


Tail Rotor System 


weight w/fuel 8442.3 lbs 
weight empty 5780.0 lbs 
length By noe. Lc 
flat plate area (forward) eee Serr Cc 
flat plate area (vertical) 41.8 sqft 
Main Rotor System 
# main rotor blades 4 
rotor radius Zeme oer t 
tip velocity 725.98 fps 
rotational velocity 31.19 radps 
thrust coefficient 0.00396 
blade solidity 0.08205 
blade aspect ratio 15518 
average lift coefficient 0.26057 
blade airfoil lift curve slope Ge 5 
blade drag coefficient 0. 010s 
disk loading A oae 
Main Rotor System Performance 
maximum advance ratio OF 2e417 
maximum blade loading 0.07 
maximum forward velocity 170 knots 
tiploss OFo7775 
induced power in hover OGE 481.57 SHP 
profile power in hover OGE 144.35 SHP 
total power in hover OGE 625.90 SHP 
figure of merit Oma 2 57 
percent induced power 76.940 
induced power in hover IGE 416.47 SHP 
total power in hover IGE 560.80 SHP 


see tabl 3.1 


# tail rotor blades 13 

radius Cae t 
rotational velocity 362.99 radps 
rpm 3456.74 
thrust coefficient 0.00396 
blade solidity 0.68967 
blade chord ORG Z2 Ss See 
aspect ratio 6 

drag coefficient Ob OOS 


a 


TABLEG3o2 


MAIN ROTOR POWER 


STANDARD SEA LEVEL 
ALTITUDE= 0O FT TEMPERATURE = 59 DEG. F 
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----------------- POWER ------------------ 
AIRSPEED TIP INDUCED PROFILE PARASITE TOTAL 
(knots) MACH (SHP) (SHP) (SHP) (SHP) 
0.0 0.650 73.05 195.91 259.91 528.88 
20.0 0.680 155.36 155.62 26.60 337.58 
40.0 0.710 158.03 155.23 25.25 338.51 
60.0 0. 740 160.78 154.86 23.94 339.58 
80.0 @.770 163.63 154.48 22.68 340.79 
100.0 0.801 166.58 15412 2 Ag 342006 
iin 0 On631 169.63 WSae76 20.30 343.68 
140.0 0.862 172.01 153.41 19.17 345.36 
160.0 0.892 176.06 153.06 18.08 347.20 
170.0 0.907 179.45 152.72 17.04 349.21 
MAIN ROTOR POWER 
SPECIFICATION ALTITUDE 
ALTITUDE = 4000 FT TEMPERATURE = 95 DEG. F 

~----------------- POWER ------------------ 

AIRSPEED TIP INDUCED PROFILE PARASITE TOTAL 
(knots) MACH (SHP) (SHP) (SHP) (SHP) 
0.0 0.629 $37.20 116.57 0.00 653.79 
ale ote 0.658 430.74 117.65 0.88 549.27 
40.0 0.688 271.80 120.90 7.05 399.75 
60.0 B..717 186.09 126.32 23.78 336.19 
80.0 0.746 140.26 133.90 56.37 330.53 
100.0 0.775 112.36 143.66 110.09 366.11 
120.0 0.805 93.68 155.58 190.24 439.50 
140.0 0.834 80.31 169.67 20 2e10 552.08 
160.0 0.863 70.28 185.92 450.95 707.15 
170.0 0.878 66.15 194.86 540.90 801.91 


Tail Rotor System Performance 


tiploss 

induced power in hover OGE 
profile power in hover OGE 

total power in hover OGE 

induced power in hover IGE 

total power in hover IGE 

tail length 

tail rotor power (function of A/S) 


Vertical Stabilizer 


planform area 

span 

sweep at mid-chord 

aspect ratio 

angle of attack 

coefficient of lift 

lift curve slope 

lever arm 

tail rotor power w/vert stabilizer 
(fumetion of A/S) 


Propulsion System 


# engines 
type engines 
eee: Ibs/hr/lb thrust 

military 

normal 

cruise 
SHP: 

military 

normal 

cruise 
fuel flow: 

military 

normal 

cruise 
zero horsepower intercept @SSL 
zero horsepower intercept @spec alt 
phantom horsepower @SSL 
phantom horsepower @spec alt 
maximum range velocity 
maximum range referred horsepower 
maximum range fuel flow 
maximum endurance velocity 
maximum endurance referred horsepower 
maximum endurance fuel flow 
cruise fuel flow @ SSL 
cruise fuel flow @ spec alt 
total fuel required 


cw) 


0.98449 
427 
.874 
~ 302 
~124 
7206 


abe 
Sighs 
ae 
Sie 
elghe 


2 oer 
see tabl 3.2 


20 sqft 

oA ie 

45 deg 

4.05 
-0.1644 deg 
0.39036 
Suse oy rad 
22 fe 


see tabl 3.3 


2 
turboshaft 


Oo 
O73 
Of o9 


D3 
685 
D510 


63 Jae Los7 hr 
4 35ers / nr 
658.9 lbs/hr 
126.7376 

es eS. 3 
261.972 
233.9749 

123 knots 
805.2546 
389.6 lbs/hr 
65 knots 
Gis 

296.8 lbs/nr 
360.5 Shbs7 ar 
3364.2) )5seor 
912.3 lbs 


TABLES 3.2 


TAIL ROTOR POWER 


STANDARD SEA LEVEL 
ALTITUDE = OGFF TEMPERATURE #="59 DEG. F 
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----------- POWER ---------- 
AIRSPEED TIP INDUCED PROFILE TOTAL 
(knots) MACH (SHP) (SHP) (SHP) 
0.0 0.462 39.43 10787 50.30 
20.0 0.492 5.44 11.72 17.16 
40.0 G.2522 5.56 71.70 17.26 
60.0 0.553 5.69 11567 2-36 
80.0 0.583 5.83 11.64 17 #47 
100.0 0.613 5.98 11.61 17.60 
r20n6 0.643 6.15 11.58 1773 
140.0 0.674 6.32 11.56 17.88 
160.0 0.704 6.51 11.53 18.04 
170.0 0.719 6.71 11.51 28 son 
TAIL ROTOR POWER 
SPECIFICATION ALTITUDE 

ALTITUDE = 4000 TEMPERATURE = 95 DEG. F 
----------- POWER ---------- 
AIRSPEED TIP INDUCED PROFILE TOTAL 
(knots) MACH (SHP) (SHP) (SHP) 
0.0 0.447 44.12 8.78 52.91 
20.0 0.476 30.94 8.94 39.89 
40.0 0.506 12.52 9.43 21.95 
60.0 0.535 6.20 10.24 16.44 
80.0 0.564 4.53 11 Jao 15.89 
100.0 0.593 4.45 12). Se T7a2g 
120.0 0.623 5.35 14.60 19.95 
140.0 0.652 7a 16.70 23.95 
160.0 0.681 10.44 19.12 29.56 
170.0 0.696 12.64 20.46 a3. 10 


TAD ibd = 3 


TAIL ROTOR POWER WITH VERTICAL STABILIZER 


STANDARD SEA LEVEL 


ALTITUDE = O FT TEMPERATURE = 59 DEG. F 
----THRUST---- 0 we enn = = = - == - === POWER ------------------- 
TAIL VERT/ MAIN VERT/ 

AIRSPEED ROTOR STAB ROTOR STAB INDUCED PROFILE TOTAL with v/s 
(knots) (lbf) (1bf) (SHP) (*SHP*)  (SHP) (SHP) (SHP) 
0.0 441.5 0.0 528.9 0.0 39.4 10.9 50.3 
20.0 363.0 10.6 337.6 1. 2 22.9 licg 34.0 
40.0 267.9 ao, 3 338.5 52.8 6.9 ee? 18.6 
60.0 Daal 95.3 339.6 Tega aot Isl 14.8 
80.0 246.0 169.4 340.8 2a ead 0.6 iG ee, 
100.0 285.5 264.6 342.2 330.2 oe 11.6 16.0 
120.0 355.3 381.1 343.7 475.4 0.0 116 Pescl 
140.0 457.7 518.7 345.4 647.1 0.0 11.6 NO). 
160.0 596.2 677.5 347.2 845.2 0.0 11.5 2507 
170.0 680.2 764.8 349.2 954.2 0.0 11.5 25.3 


TAIL ROTOR POWER WITH VERTICAL STABILIZER 


SPECIFICATION ALTITUDE 


ALTITUDE = 4000 FT TEMPERATURE = 95 DEG. F 
----THRUST<---- 00 won $= = -- === - POWER ------------------- 
TAIL VERT/ MAIN VERT/ 
AIRSPEED ROTOR STAB ROTOR STAB INDUCED PROFILE TOTAL with v/s 
(knots) (l1bf) (1bf) (SHP) (*SHP*) (SHP) (SHP) (SHP) 
0.0 461.2 0.0 653.8 a0 44.1 8.8 52.9 
20.0 387.4 8.9 549.3 eo 29.5 8.9 38.4 
40.0 282.0 35.4 399.8 Aue 9.9 9.4, 19.3 
60.0 237 <1 Wee 336.2 99.4 a1 TOR2 13.3 
80.0 233.1 141.7 330.5 176.8 1.0 lena 123 
100.0 258.2 22154 366.1 276.2 0.3 12). 13 1 
120.0 310.0 318.8 439.5 397.8 Gro 14.6 14.6 
140.0 389.4 434.0 552.1 541.4 0.0 16.7 16.7 
160.0 498.8 566.8 Gas 707.2 0.0 oe 19) 
170.0 565.6 639.9 801.9 798.3 0.0 20.5 20.5 
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Overall Performance 
total power req (with high spd eff) see tabl 3.4 
compressibility and stall effects see tabl 3.5 
©. SYSTEM DESCRIET ie 
As stated in Chapter II, the first step in any 
vulnerability program is a compilation of as much 
functional and technical information on the aircraft as 
possible. The preceeding aircraft description is the very 
minimum required in order to perform and adequate 
vulnerability program. In point of fact, this description 
should also include as many drawings, both exterior and 
interior cross sections as possible. Additionally, all 
components and systems should be described as to how they 
function, what they are made of, and how they relate to the 
overall operation of the aircraft. A brief description of 
the six major aircraft systems (the flight control, fuel, 
propulsion, rotor and drive, armament and structural 
systems) follows. The flight control system will be 
described is some detail with the aid of figures and 
diagrams, whereas the other systems will be treated with 
only a brief discussion. 
1. The Flight Control System 
The flight control system for the AH-80 is a 
standard type helicopter flight control configuration 
consisting of a collective assembly for collective pitch 


control, a cyclic assembly for cyclic (i.e., lateral and 
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AIRSPEED 


(kts) 


0.0 
20.0 
40.0 
60.0 
80.0 

100.0 
120.0 
140.0 
160.0 
170.0 
190.0 


ALPHA 
(90) 


=2./02 


ALPHA 
(90) 


=2..03 
=2.39 | 
-2.668 
=o oo 
-1.842 
=2- 189 
-2.473 
=2..710 
—Jeoe. 


=—s O10, 


~Jeelo 


Pape 3.4 


STANDARD SEA LEVEL 
ALTITUDE = 0 FT 


ALPHA 
(270; 


3.413 
0.678 
0.660 
0.643 
0.626 
0.611 
0.595 
0.581 
0.567 
0.553 
0.540 


TEMPERATURE 

M90 Mcrit 
0.8374 0.9085 
0.7376 0.8740 
0.7361 G-6873F 
0.7346 0.8723 
0.7331 0.8714 
0.7316 0.8706 
0.7301 0.8697 
0.7286 0.8688 
O77 271. 0.8678 
0.7256 0.8669 
0.7240 0.8659 


SPECIFICATION ALTITUDE 
ALTITUDE = 4000 


ALPHA 
(270) 


=2)- LOS 
=2.066 
-2.036 
rea 
ae 
Ae Sea | 
4.279 
5.808 
7.895 
9201. 
12.454 


TEMPERATURE 
M90 Merit 
0.6291 0.8844 
0.6584 0.8960 
0.6876 0.9071 
0.7169 0.8562 
0.7461 0.8739 
0.7754 0.8879 
0.8046 0.8993 
0.8339 0.9088 ¢ 
0.8631. 0.9172 
0.8777 0.9212 
0.9070 0.9292 
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COMPRESSIBILITY AND STALL EFFECTS ON POWER REQUIRED 
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AIRSPEED 


(kts) 


0.0 
20.0 
40.0 
60.0 
80.0 

100.0 
120.0 
140.0 
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170.0 
190.0 


ALTITUDE = 0O FT 


Pi 
(shp) 


73.0 
155.4 
158.0 
160.8 
163.6 
166.6 
169.6 
172.8 
L766. 7 
179.4 
183).9 


Pi 
(shp) 


Sime 
430.7 
271.8 
186.1 
140.3 
112.4 
J A 
80.3 
70.3 
66.2 
59.2 


TABLE 3.5 


TOTAL POWER REQUIRED 
(With High Speed Effects) 
STANDARD SEA LEVEL 


TEMPERATURE = 59 DEG. F 


Po Pp Ps Pm 
(shp) (shp) (shp) (shp) 
19 on0 259),9 0.0 0.0 
155.6 26.6 0.0 0.0 
19 Sie 2on2 0.0 0.0 
154.9 23.9 0.0 0.0 
154.5 22 0.0 0.0 
LSm.. 1 25 0.0 0.0 
154.8 20.3 0.0 0.0 
153.4 19.2 0.0 0.0 
Lisi pS ak 0.0 0.0 
mes 17.0 0.0 0.0 
152.4 16.0 0.0 0.0 


TOTAL POWER REQUIRED 


(With High Speed Effects) 
SPECIFICATION ALTITUDE 
ALTITUDE = 4000 


re TEMPERATURE = 95 
Po Pp Ps Pm 
(shp) (shp) (shp) (shp) 
116.6 0.0 0.0 0.0 
117 oy 0.9 0.0 0.0 
120.9 7.0 0.0 0.0 
i26,.4 236.0 0.0 0.0 
133.9 56.4 0.0. 0.0 
143.7 110.1 0.0 0.0 
155.6 190.2 0.0 0.0 
169-7 302.1 0.0 0.0 
185.9 450.9 0.0 0.0 
194.9 540.9 0.0 0.0 
214.4 Poa. 1 0.0 0.0 


Ptr 
(shp) 


Oi 
Li 2 
Lies 
17.4 
i 
17.6 
2s 7 
17.9 
18.0 
1872 
18.4 


DEG. F 


Ptr 
(shp) 


a2 .9 
39.9 
2169 
16.4 
oo 
Li? 13 
20.0 
24.0 
29.6 
33 2) 
42.0 


PT 
(shp) 


674.8 
550.0 
400.8 
3373) i 
366.8 
420'.0 
327.8 
677.6 
880.9 


1004.4 
129973 


PT 
(shp) 


705.0 
389.2 
2.7 
Joe .6 
346.4 
383.4 
459.5 
576.0 
736.7 
835.0 


1070.7 


longitudinal) control, and a pedal assembly for directional 
control of the aircraft. Additionally, a control surface 
has been incorporated on the vertical stabilizer to assist 
in aircraft directional control during periods of degraded 
tail rotor operation. The collective, cyclic and 
directional control systems are depicted in Figures 3.4, 
Seo and 3.6 

During periods of normal operation the aircraft is 
controlled in all axes by these flight controls. Pilot 
inputs to the collective, cyclic, and pedals result in 
electrical signals being sent via electrical wires 
eventually to hydraulic servoactuators located below the 
mixer assembly for the collective, lateral and longitudinal 
channels and in the tail boom for the directional channel. 
Should a signal be interupted for any reason there is 
automatic and complete mechanical backup available. The 
flight control surfaces are both electrically and 
mechanically actuated and hydraulically powered in all axes 
by a dual hydraulic system. In addition, the mechanical 
system is capable of controlling the aircraft in all flight 
regimes with a complete loss of hydraulic power. The afore 
mentioned "rudder" assembly is a mechanically operated 
flight control surface designed to maximize high speed 
performance yet still provide the capability for a 
nonvertical landing of the aircraft with degraded or no 


tail rotor thrust performance. This surface can be manually 
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Figure 3.4 Collective Control System 





Pugure 3.5 Cyclic Control "system 
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Figure 3.6 Directional Control System 


set and adjusted to enable the aircraft to be landed at any 
airspeed in excess of 70 knots. 

The automatic stabilization system incorporates 
automatic stabilization equipment (ASE), which assists the 
crew in obtaining and holding a stable weapons platform 
under any battlefield conditions in any weather. The flight 
computer for the ASE system is located in the forward 
avionics mission equipment bay just forward of the crew 
station. 

2. The Propulsion System 

The propulsion system for the AH-80 features the 
installation of twin turboshaft engines. Each engine is 
capable of 735 shaft horsepower (SHP) for a total of 1470 
SHP available. With this engine installed, the aircraft is 
able to sustain forward flight even under single engine 
conditions. However, should a single engine condition 
result while in a hover at maximum gross weight an 
attrition kill would result. 

Each engine is installed relative to the fuselage 
as shown in Figure 3.7. This installation provides for 
maximum protection from expected projectile penetration due 
to the location of the stub wings/weapons bays. This 
screening effect, when combined with the size and shape of 
the inlets, also serves to reduce the radar signature of 
the aircraft when viewed from below. The engines are widely 


seperated and well shielded in an effort to make them truly 
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Figure 3.7 Propulsion System Installation 
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redundant critical components. The inlets are of S-type 

curved design incorporating air particle seperators. The 

exhaust is sufficiently cooled by the use of IR suppressors 

that engine exhaust does not present a signature problem. 
3. The Rotor and Drive System 

The rotor subsystem consists of four main rotor 
blades, thirteen tail rotor blades, the main and tail rotor 
hubs and the main rotor support structure. Both main and 
tail rotor blades are of advanced composite construction 
and 1990's design. The blades themselves are designed to be 
invulnerable to a 23 HEI round. The main rotor hub 
incorporates standard lead lag hinges, dampers and tension 
torsion straps for flapping and feathering motions. 

The tail rotor is of FENESTRON design to improve 
its strength characteristics, reduce the power required to 
obtain the desired performance and also improve the 
Signature of the overall aircraft. The assembly is mounted 
on plastic bearing which requires no lubrication. Blade 
pitch change is accomplished by means of a hydraulic servo 
Tea ae. 

The main rotor support structure consists of a mast 
Support structure and a static mast. This arrangement 
increases the toughness of the mast head and overall rotor 
system. Additionally, the main rotor mast supports a mast 


mounted IR sight and electronic warfare components. 
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The drive subsystem consists of gearboxes on each 
engine nose, the gearbox to transmission shaft, the main 
transmission, the main and nose gearbox dual lubrication 
system, the auxiliary power unit (APU), the rotor brake 
assembly, the tail rotor drive shaft and associated 
couplings and the tail rotor gearbox. Each nose gearbox 
enables the applicable engine to be decoupled from the main 
transmission in the event of a loss of power. The main 
transmission itself is capable of performing up to its 
design loads for up to 30 minutes after a complete loss of 
lubrication. The tail rotor drive shaft is ballistically 
tolerant and considered invulnerable to a 23mm HEI round. 

4. The Armament System 

The VIPER is an extremely potent light attack 
helicopter. All weaponry is located internal to the 
aircraft in an effort to reduce the radar signature and and 
improve its high speed performance by reducing the profile 
drag. This effort has been very successful with the 
incorporation of a stub wing/weapons bay. Each wing houses 
four antiarmor missiles and one air-to-air missile. Further 
Signature reduction is achieved by the use of electrically 
operated doors which cover the weapons ports when not in 
use. These doors are fail safe open, enabling all weapons 
to be operational in the event of an electrical failure. 
Located forward and below the pilot and to the left of the 


centerline of the aircraft is an internally mounted 20mm 
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gatling gun and linkless feed system. The gun is powered by 
the aircraft hydraulic and electrical system. 

5. The Fuel System 

The AH-80 fuel system consists of two tanks 

situated fore and aft along the aircraft centerline, and 
all associated plumbing, filters and pressurization 
equipment. One electrical fuel transfer pump is located 
within each fuel cell. There is no provision for either 
conventional helicopter in flight refueling (HIFR) or in 
flight refueling via a probe due to the single crew concept 
and the problems and weight associated with installation of 
a fuel probe. As much of the plumbing as practical is 
internal to the tank to reduce the overall vulnerable area 
of the fuel system. The two tanks together have a capacity 
of 912.27 pounds of JP-5 which provides the VIPER with a 
range in excess of 250 nautical miles. This allows the 
VIPER ample reserve to accomplish its mission. 
Fire/explosion suppression foam is installed in the ullage 
of both tanks, and both tanks are self sealing. 

6. The Structural System 

The major structural sections of the AH-80 are the 

forward fuselage section, the center fuselage/stub wing 
section, the upper fairing, the tail boom and the 
empennage. The forward fuselage section houses the 20mm 
gun, the forward avionics bay, the forward fuel tank, the 


cockpit and the forward main landing gear. 


ome 


The center fuselage section serves as the major 
Structural load bearing member containing the main 
transmission support assembly, the main transmission, the 
aft fuel tank, the aft main landing gear, the stub wings 
ana the engine mounts and propulsion system. 

The upper fairing serves aS a mount for the main 
rotor support assembly including the static mast and the 


mast mounted infared sight. 
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IV. AH-80 MISSION/THREAT ANALYSIS 


A. MISSION ANALYSIS 

The AH-80 VIPER is designed and armed as a multi- 
mission all weather light attack helicopter. Additional 
duties could include scout/reconnaissance, antipersonnel, 
flank security and utility. The ordnance load for all 
missions is 8 antiarmor missiles, 2 air to air missiles and 
a 20mm gatling gun. The antiarmor missle is a semiactive 
homing weapon while the air to air missle is an IR homing 
escale. This ordnance can be delivered from any flight 
regime on target and in any weather. Three particular 
mission profiles are examined. The first of these is a 
generic antiarmor mission as depicted in Figure 4.1. The 
second, depicted in Figure 4.2, is a reconnaissance 
mission, and the third is the flank security mission 
profile depicted in Figure 4.3. Airspeeds and flight 
tactics are also listed for each profile. 

For this case study, the generic antiarmor mission has 
been chosen. This is an offensive mission with a combat 
radius of action of up to 300km. This is well within the 
capabilities of the VIPER. The targets to be engaged can 
be estimated as approximately 50% tanks, 40% armored 
vehicles and 10% personnel and other aircraft. The tactics 
employed during these engagements are similar to those 


currently employed by aircraft already in the inventory. 
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Several scenarios are possible. The first involves the 
VIPER fighting as a section of two aircraft. Each VIPER is 
equipped with a mast mounted laser designator which enables 
it to mask itself and still designate the target fora 
second Viper which engages the target with its antiarmor 
weaponry. This section could also consist of one VIPER and 
some other helicopter currently in the inventory. In the 
second scenario, the AH-80's speed, power, maneuverability 
and superior targeting capabilities enable it to act 
completely autonomously, engaging enemy targets without 
masking and while performing evasive maneuvers to decrease 
its overall susceptibility. The 20mm gun and the air to 
alr missiles can be used in an air to air role, whereas the 
20mm can also be used against ground targets. Specific 
tactics as conceived by the author are depicted in Figures 


4.4, 4.5 and 4.6. 


B. THREAT ANALYSIS 

The VIPER is strickly an army helicopter operating from 
a land base. Therfore, the expected threats include only 
those systems employed by enemy block land forces. No 
naval weaponry is expected to be encountered. These 
threats include air defense artillery such as 23mm and 57mm 
guns, lazer weaponry, air defense missile systems, standard 


artillery, tank main guns, small caliber gun fire, ground 
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launched anti-~armor weaponry and hostile high performance 
aircraft/helicopters. 

The threat chosen for this study is a generic surface 
to air IR homing missile with a fragment size of 100 


grains. 


aS 


Distance Speed 
a-b 100 Vbr 
b-c 2 Variable 
on station Loiter 20 min Variable 
c-b 2 Variable 
b- d 2A Vbr 
d-b 21 Vbr 
b-c Z Variable 
On Station Loiter 20 min Variable 
c- b 2 Variable 
b- a 100 Vbr 


Definitive points: 
a. Assembly area 
b. Holding area 
c. Battle position 
d. FARRP 


Figure 4. 1 


Generic Antiarmor 
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Mission 
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Yontour 
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Distance (km) Speed Flight M 
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b-c 20 Vbe NOE/Contour 
c-d 25 Vbe NOE/Contour 
d-e 1S Vbe NOE/Contour 
e-f 20 Vbe NOE/Contour 
f- g 15 Vbe NOE/Contour 
g-h 25 Vbe NOE/Contour 
h- a 120 Vbr Contour 
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b. Air Contact Point ( ACP) 

c-h. ACP 


Figure 4.2 Generic Reconnaissance Mission Profile 
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Figure 4.3 Generic Flank Security Mission Profile 
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Figure 4.4 Specific Antiarmor Mission Profile 
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V. AH-80 FLIGHT AND MISSION ESSENTIAL FUNCTIONS 


Flight essential functions are those system and 
subsystem functions required to enable an aircraft to 
sustain controlled flight. Mission essential functions are 
those system and subsystem functions required to enable an 
aircraft to perform its designated mission. Flight 
essential functions are very clearly those functions which 
are performed by critical components, defined as any 
component whose loss or damage would lead to a loss of 
lift, thrust or control. In the AH-80, the most obvicusma. 
these critical components is the main rotor system which 
provides for all three of these flight essential functions. 
Mission essential functions are those which are performed 
during various phases of flight but not during others. 
Functions such as navigation, communication, weapons 
delivery and target tracking are not functions which are 
necessary to keep the aircraft under controlled flight. 
Rather they are only required while performing a designated 
mission. The missions required are outlined in the 
Mission/Threat analysis. 

Table 5.1 is a list of the systems and subsystems 
incorporated in the AH-80 VIPER and their functions. Using 
this list, each individual system/subsystem can be examined 
for each particular phase of flight. The phases of flight 


which are recognized for the antiarmor mission chosen are: 
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Al east 

Takeoff 

Cruise to Laager Area 
Cruise to Holding Position 
Cruise to Assault Position 
Engage Targets 

». Return Cruise 

- Land 


On oa oP WD - 


Table 5.2 correlates these mission phases with the flight 
and mission essential functions required for each. 

By combining Table 5.1 and 5.2, a matrix can be 
developed which shows which systems or subsystems are 
required for each phase of flight. It would be entirely too 
complex and counterproductive to investigate each phase in 
this type of case study. Therefore, as it is the most 
interesting, the phase during which the target is engaged 
will be examined in detail. It can subdivided into the 
following subphases:; 

Locate and identify target 

Verify target range 

Hover/Cruise into firing position 
Launch antiarmor missiles 

Launch air to air missiles 

Fire 20mm gatling gun 


Depart firing position 
Land at FARRP and reload 


ON A OP WD FE 


Concentrating on these subphases results in a matrix 
which shows which systems are required during each subphase 
of the targeting phase of flight. (Table 5.3) From such a 
table it can be seen exactly which functions are considered 
flight essential and which ones are considered mission 
essential. Each system contributes to the success or 


failure of the subphase in some way. Some are obviously 
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required for flight, such as the rotor system while others 
are strickly mission such as the antiarmor missile system. 

Chapter VI will use all of the information developed up 
to this point to produce the AH-80's FMEA and DMEA or as 


presented together here, the FMECA. 
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TABLE 5.1 SYSTEMS/SUBSYSTEMS AND FUNCTIONS 


System/Subsystem 


Pilot 


Engines 


Inlet 

Compressor 
Combustor 

Gas generator 
Power turbine 
Accessory gearbox 
Engine oil/fuel 
Tailpipe 


Hydraulics 


Primary/secondary mainifold 
Primary/secondary reservoir 
Primary/secondary pump 
Primary/secondary accumulator 
Collective actuator 

Pitch actuator 

Rela actuator 

Yaw actuator 

Pressure and return lines 
Filters and coolers 


Flight Controls 


Rotary/stationary interface 
Collective installation 
Cyclic installation 

Tail rotor installation 


Structures 


Empennage 
Fuselage 
Rotor support/mast 


Drive 


Main transmission 

Main rotor static mast 

Main oil cooler 

Drive shaft couplings 

Engine nose gearbox 

Tail rotor drive shaft 

Tail rotor gearbox 

Tail rotor driveshaft 
vibration dampers 

Hangar bearings 
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Function 


Maintain aircraft control 


Provide and/or maintain 
required shaft horsepower 
necessary for desired 
EOCOL Kom 


Provide hydraulic power 
for aircraft control, 
weapons deployment, 
landing gear, etc. 


Provide for concrol of 
aerodynamic surfaces 
such as main rotor and 
taal preter pitch 


Provide for structural 
integrity of the aircraft 


Provide for translation 
of engine shaft horse- 
power into main and tail 
BOCOL GOtational velocity 


TABLE 5.1 (cont.) SYSTEMS/SUBSYSTEMS AND FUNCT ICH 


System/Subsystem rune elon 
Rotor 
Main rotor blades 
Tail rotor blades Provide for required lift 
Main rotor head thrust and control 


Tail rotor head 


Fuel 
Forward fuel cell 
Aft fuel cell 
Forward cell sump 
Aft cell sump Provide for fuel flow to 
Boost pump engines and APU 
Fuel lines 
Shutoff valves 
APU feed lines 


Electrical 
Battery 
Generators Provide necessary 
Wiring electrical power to 
Transformers/Rectifier flight/mission systems 
Avionics 


UHF/VHF communications 
Secure communications 


Navigation Provide required 
Flight/mission computers capabilities during 
Instrumentation applicable phases of 


Electronic warfare components flight 
Automatic stabilization 


Armament 
Ammunition drum 
Ammunition feed Provide required 
20mm barrel offensive capabilities 


antiarmor missiles 
air to air missiles 


Environmental 
Blower assembly ' Provide required environ- 
Air conditioner/heater ment for selected 
Ducting components and pilot 


66 


| | | | 
| | | | 
| x | | X | X 
| | | | 
| | | | 
| X | x x | X 
| | | | 
| X I X | X | X 
| | | 
| | | | 
| | | | 
| \ | | 
| | X | 
| | | | 
| | | | 
| | | | 
| | | | 
x | x | X | X | X 
| | | | 
| | | | 
X | X | X | X | X 
| | | | 
| |---| | 
| | | UOT {TSO | uot} 
| astnid| sqabiey,| yINessy | but 
pue'y| UINA2u | abebug | 0} 8stnID| 0} 93 


| | | 
| | | 
| X | | 
| | | 
| | | 
| x | X | 
| | | 
| X | X | 
| | | 
| | | 
| | | 
| | | 
| | | 
| | | 
| | | 
| | | 
| | | 
| X | X | 
| | | 
| | | 
| X | X | 
| | | 
|__| | 
FSOg | early | | 
PTOH | qabeey| i 
tnI5| 03 astni5| JjOOYSL | 


3419TW| 


em | 


saseud 


uOTSSTW 


Bouer1IvaTO 
uTel193 ~UTeQUTeU 


aouebT [Tout 
ejep Ate aptaocid 


sue jsdAs 103TUOU 

sue jshs j1e 439g 
BOTOA poINdesuN, 
BOTOA paInoes, 

SUOT }EOTUNLUOD 


suOTSSTW 


qUubT TZ 
PeTTOI4UOD |apTAoid 


qsnzy 


pue 3JTT aptaoid 
-3ybt Td 


SsuoTzoung 
TeT3uassq 


ir a ee er een 


SdIHSNOILVTY FSVHd NOISSIW 


/NOLIONNY WIINSSSA WELAOCOITAH WOWLIWV 
Z°S ATAVL 


67 


—— —— i i ee 


nm SE 


astnio| 
uInjay | 


| | | | 

X | | | | 
| | | | 

| | | | | | 

X | | | | | 
| | \ | | | 

| X | X | x | | | 

| | I | | 

X | X | | | , 
| | | | | | 

| —_—— | | I |! | 
| UOT ATSOg | uoT TSO | eo | | | 
sjeb1eL| AInessy | but pToH | Jabeey| | | 
abebuy | Oj} 9sTNID| 032 astniD| 03 astni5| JyJOIYeL| 3JsaTY] 


seseyd UOTSSTW j 


SdIHSNOILVTWY JSWHd NOISSIN/NOLIONAY IWLINSSSS YWELGOOITSH YSWLLV 
(°3U0D) Z7°S ATEVL 


suodeam Ao [due 


gsjabI3e 3 
AZT AUSpPT /aQed0T 


a zebr aru 


Woa/sat Ao Tdug 
> (°qU0D) UOTSSTW 


68 


SsuOT OUNY 
TeTquessg 


4TF 
4TZs 


WF\w 


4TF 


ATF 


(n/q) ITZ 
qs 
qs 

wz/u 


pue QMWI We puey | 


E 


ee EE EE Ee ee 


Wz 


WWF 


(n/q) 33 
WM 
wWsF/u 
qs /u 





| 
| 
| 
| 
| 
! 
| 
| 
| 
| 
| 
| 
| 4Tz/u 
| 
| 
| 
| 
| 
| 
| 
| 
| 
| 


uoT}ISsog HuT3Ty | 


qiedaq 03 | 
qWbTTI satseag | 


E 


WF 


3 Ww 


WWF 


WA 


| 


aSeoTey uodeom 


WIZ 
WI 
Wz/u 


atz/u 


3Tz/u 


(n/q) ITF 
Wz/u 
qaz/u 
Ws/u 


uoTATSOd 
butITg OUT 
IsAoH /estnjag 


qawz/u 


abuey 


qobrey, AFTI9A 


E 


| wi 
| 
| 
_- 
| 
| 
| —— 


| 
{ ieee 
| 
| —S—_ 
| 
| 3z/u 


| 
| 
| 





33961], 
AJ} up] 
| pue 93RD07 
| 


= Se cee ce ge ee es ee ee eo ee ee eee ee eee ee ee ee ee ee ee ee es ee ee ee ee eee eee ee 


TO1QUOD 
TequsumolT Aug 


§91NQONIAS 
sup qsds oT TnerpAy 
Sout Bug 


wa sks 13aMog 
TeoT 399TH 


STO1qQUOD 
qO6TTa OTu0IqDeTY 


$[01qUOD 
quot Ta Teotueyoow 


Tend 
10304 


AOTTd 


wa sAsqns Aus4sdks 





seseydaqns Sutqab1ey, 


dnyseq = n/q WOSTTZ = 4TJ UOTSsTU = Ww 


‘ 





AYWWANS NOLIONNY TWLINSSSH NOISSIW GNW LHOI'TI—dSVHd INSWEISWOND LaASeL 


€°S ATH. 


69 





4wT3 | Iz/u | w | qTz/u | ——— | wz | qeqsoqny 
| | 

wz | we | we | ut | TZ | Ws | skeTdstq 
| | | ! 

Wz | we | TFN | WA | Wi | Wz | SToued Juoums4sul 
| | | 

—- | wf uw | — | we | — _| s13qndiny uoTsstW 
| | | | | 

| \ | | Ss quauoduoD 

— | we | — | ws —- | -—— | oJejiemM Stu0145eTg 
| | | | ! | 

' | | | squaUucdwoD UOTILOTITI 

— | — | —- | — | — | wo | -uapr Alo; zeoTUMUIDD 
| | | | 

| | I | | | squeucduoy [o02QU0D 

——— | u | — | we | — | suodesm 
| | | 

ww =| qTz/u | ITs /u | 3TF/u | al ag aAtId 

| — — —| |——---____—_—_ 

| | | | | wa qsAsqns Ausysds 

| uotqyrsog but3atg | | uoTRTSOg | | syabiey, | 
peojau | yiedag 03 | | Butta OjuT | abued | AjyQuapl | 
pue amvi ye puey | AYyStTy eatseag | aseatay uodesom | WaOoH/sstnIDg | yYobsey AzyIVA | pue 33eD07 | 
| | | | 

seseudqns buTqebiey, dnyseq = n/q  ybTTJ = ATJ UOTSSTW = wW 





AYMWWWNS NOLIONNA TWIINSSSH NOISSIW GNW JH9SIMI — 3SWHd INGWISNONG LOSNVL 
(°3U095) €°S FATAL 


70 


VI. AH-80 FAILURE MODE, EFFECTS, AND CRITICALITY ANALYSIS 


In the previous chapter, the essential functions 
required for the VIPER to continue its mission, and the 
major systems and subsystems required to perform those 
essential functions, were identified. The next step ina 
critical component analysis is to conduct a Failure Mode, 
Effects, and Criticality Analysis (FMECA). The FMECA is 
broken down into two distinct phases for ease of analysis, 
the Failure Mode and Effects Analysis (FMEA), and the 
Damage Mode and Effects Analysis (DMEA). This chapter will 
apply the FMECA methodology described in a general sense in 
Chapter II, and presented in Reference 1:pp140-153, 
specifically to the AH-80. Additionally, though not 
required by MIL-STD-2069 [Ref.4], a Fault Tree Analysis 
(FTA) is also included as an aid in the identification of 


the critical components. 


A. AH-80 FAILURE MODE AND EFFECTS ANALYSIS (FMEA) 

"The failure mode and effects analysis is a procedure 
that: (1) identifies and documents all possible failure 
modes of a component or subsystem and (2) determines the 
effects of each failure mode upon the capability of the 
system or subsystem to perform its essential functions." 
As can be seen from this definition, the FMEA is in no way 


concerned with the cause of the failure, only the effect 


val 


that that component failure had on the individual subsystem 
or system it was a member of. "The FMEA is normally 
provided by engineers who are concerned with system safety, 
reliability and maintainability. It is based on design 
requirements, historical data (if the system is still in 
the concept stage), predicted performance measurements and 
sound engineering judgement." [Ref.3:p70] As described 
earlier, the AH-80 flight control system will be the only 
system analyzed in detail using the FMEA methodology. Each 
component is examined to determine the role that it plays 
in the flight control system, what effect its damage would 
have on its immediate subsystem, and the effect of the 
failure on the overall mission capability of the VIPER. The 
results of this analysis are presented in the FMEA matrix, 


Table 6.1. 


B. DAMAGE-CAUSED FAILURE ANALYSIS 

As in reference 3, the material presented in this 
phase of the case study will consist of five sections: 
(1) The DMEA Matrix, (2) The Disablement Diagram, (3) The 
Fault Tree Analysis, (4) The Kill Tree, and (5) The P(kK/h) 
Functions. The DMEA Matrix, Disablement Diagram, and the 
FTA will_be presented for the flight control system alone, 
whereas the Kill Tree, and P(k/h) functions will be 
presented for the entire aircraft. MIL-STD-2069 [Ref.4)] 


states that following the DMEA matrix, the list of critical 
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components is complete; however, here the list will be 
presented following the FTA in order to show that this list 
is the natural result of the progression of the analysis 
from the FMEA, through the DMEA Matrix, the Disablement 
Diagram, and the FTA. The P(k/h) functions and the list of 
critical components are required in the next chapter for 
the vulnerability assessment. Therefore, they must contain 
components from the entire aircraft, just as if the 
analysis had been carried out on the entire aircraft all 
=e) elo mn 
1. The DMEA Matrix 

Unlike the FMEA, the DMEA is concerned with the 
cause of the component failure. Specifically, damage 
caused by a man made hostile environment, 1.e. combat, such 
as fire, explosion, or fragment penetration is identified 
and examined. "In the DMEA, the potential component or 
subsystem failures identified in the FMEA, as well as other 
possible damage-caused failures, are evaluated to determine 
their relationship to the selected kill level."(Ref.1:p142] 

The DMEA Matrix is presented in Table 6.2. The 
components and their damage-caused failure modes are 
related to applicable kill criteria and component 
redundancy relationships. Reference is also made to Table 
6.4 where the P(k/h) values are presented for the critical 


components. 
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2. The Disablement Diagram 

The flight control system Disablement Diagram is 
presented in Figure 6.1. The diagram is a depiction of the 
locations of individual components within the overall 
system and shows the failure mode of the individual 
component, the effect of the failure, and the resultant 
aircraft kill criterion. For the purposes of this case 
study, only a few failures are shown on this dlagranm. 

3. The Fault Tree Analysis (FTA) 

The FTA is presented here for the loss of control 
Situation only. Reference 3 contains an example of the 
power of an FTA when performed on an entire aircraft. The 
methodology for this analysis is discussed in Reference l, 
pages 149-151. The FTA begins with an undesired event, and 
then determines what event or series of events will lead to 
the undesired result. Logic symbology is used in the fault 
tree or as it is sometimes called, the Failure Analysis 
Logic Tree (FALT). The FTA is one of the principal methods 
of system safety analysis, and can include both hardware 
failures and human effects. 

The undesired event for the VIPER is an A-level 
attrition kill. While the attrition kill category can be 
broken down into either the aircraft can not fly, or the 
aircraft can not land, only the former situation will be 


explored through the loss of aircraft control. 
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Figure 6.2 and Table 6.3 show the results of this 
analysis. Together they break down the aircraft, just as 
the FMEA did, to determine what event, or series of events, 
will cause an attrition kill. 

4, The Kill Tree 

The Kill Tree for the AH-80 is presented in Figure 
6.3 for the forward flight mode. This "tree" is a pictorial 
representation of the critical components and their 
redundancy relationships. It is invaluable when trying to 
determine, at a glance, the redundancy relationships for 
individual systems and subsystems. Components presented in 
series are nonredundant as their kill alone will sever the 
trunk of the tree and therefore kill the aircraft. 
Components presented in parallel are redundant components, 
as two or more components must be killed in order to sever 
ene CrounK. 

5. The P(k/h) Functions 

The final step in the DMEA process is a listing of 
the P(k/h) functions for the critical components. The 
P(k/h) function defines the probability of killing a 
component, given that it is hit by a fragment or 
penetrator. This listing is the first step in quanti- 
tatively assessing the aircraft's vulnerability. Normally, 
this list would contain every critical component for each 
aircraft system and subsystem. However, in order to 


simplify the list and clarify the methodology involved 
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TABLE 6.3 7A), PReeer ier 
COMPONENT LIST 


COMPONENT DAMAGE 
head penetration 
thorax penetration 
abdomen penetration 
pelvis penetration 
left arm penetration 
left leg penetration 
right arm penetration 
right leg penetration 


A2 WEAPONS DETONATION 
COMPONENT LIST 


COMPONENT DAMAGE 
20mm ammo drum penetration 
antiarmor missile warheads (8) penetration 
air to air missile warheads (2) of any one 
of the ten 
can cause 
attrition 


A3 CANOPY DAMAGE 
COMPONENT List 


COMPONENT DAMAGE 
forward canopy support sever 
mid canopy support if more than 
aft canopy support one severed 
pilot considered 
incapacitated 


canopy slide 
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COMPONENT 


TABLE 6.3 (cont.) 


Blll SEVERED MECHANICAL PATH 


COMPONENT LIST 


hydraulic actuator 


bellcrank/spring assy 


control rods 
rod ends 


rodend bearings 


COMPONENT 


COMPONENT List 


hydraulic actuator 


servo actuator 


wiring 


flight computer 


COMPONENT 


swashplate 


DAMAGE 


penetration/ 
leakage 
sever 
jam/sever 
jam/sever 
jam/sever 


Bl1l2 DISRUPTION OF ELECTRICAL EArH 


DAMAGE 


penetration/ 
leakage/jam 
penetration 
sever 
penetration 


B113 MIXER ASSEMBLY DAMAGE 


COMPONENT LIST 


rotating/nonrotating 
bellcrank assembly 


torque link 
pateh limk 


scissors assembly 
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DAMAGE 
sever 


sever 
sever 
sever 
sever 
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TA BEE. 6.3 J(Con:.) 
B121 ROD/LINKAGE JAMMED 
COMPONENT LIST 


COMPONENT DAMAGE 
control rods jam/sever 
rod ends jJam/sever 
rodend bearings jJam/sever 


B1l22 DECOUPLER JAMMED 
COMPONENT LIST 


COMPONENT DAMAGE 
decoupler penetration 
wiring sever 
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Figure 6.2 (cont. 
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ABE oO. 3 (CONT. ) 
B211 SEVERED MECHANICAL PATH 
COMPONENT LIST 


COMPONENT DAMAGE 
Syelic Stick sever 
pitch/roll actuators penetration/ 

leakage/jam 
bellcrank/spring assy sever 
control rods (lat/long) jam/sever 
rod ends jam/sever 
rodend bearings jam/sever 


B212 DISRUPTION OF ELECTRICAL PATH 
COMPONENT LIST 


COMPONENT DAMAGE 
pitch/roll actuator penetration/ 
leakage/jam 
servo actuator penetration 
wee LT sever 
fimght: Computer penetration 
feel trim act (lat/long) penetration 


B213 MIXER ASSEMBLY DAMAGE 
COMPONENT LIST 


COMPONENT DAMAGE 
swashplate sever 
rotating/nonrotating 
bellcrank assembly sever 
torque link sever 
pitch link (lat/long) sever 
scissors assembly sever 
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PABineeo. 5 (CONT. ) 
B221 ROD/LINKAGE JAMMED 
COMPONENT LIST 


COMPONENT DAMAGE 
control rods jam/sever 
rod ends jam/sever 
rodend bearings jam/sever 


B222 DECOUPLER JAMMED 
COMPONENT LIST 


COMPONENT DAMAGE 
decoupler penetration 
wiring sever 
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TABLE 6.28. (Cenc. 
B311 SEVERED MECHANICAL PATH 
COMPONENT LIST 


COMPONENT DAMAGE 
pedal assembly sever 
yaw actuator penetration/ 
leakage/jam 
bellicrank/spring assy sever 
aft fuselage linkage jam/sever 
tail boom linkage jam/sever 
rod ends jam/sever 
rodend bearings jam/sever 
tail rotor rotary/stationary jJam/sever 
interface 
tail retor piven Tinks sever 


B312 DISRUPTION OF ELECTRICAL FAM 
COMPONENT LIST 


COMPONENT DAMAGE 
yaw actuator penetration/ 
leakage/jam 
servo actuator penetration 
wiring sever 
flight computer penetration 
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TABLE 6.3 (cont.) 
B321 ROD/LINKAGE JAMMED 
COMPONENT LIST 


COMPONENT DAMAGE 
control rods jam/sever 
rod ends jam/sever 
rodend bearings jam/sever 


B322 DECOUPLER JAMMED 
COMPONENT LIST 


COMPONENT DAMAGE 
decoupler penetration 
wiring sever 
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Figure 6.2 (cont. ) 
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TABEE VG. 3 (Cone. 
B331 TAIL ROTOR DRIVE FAILURE 
COMPONENT LIST 


COMPONENT DAMAGE 
MGB flexible coupling penetration 
drive shaft sections penetration/ 
sever 
drive shaft couplings penetration 
pillow block assemblies penetration 
TGB flexible coupling penetration 


B332 TAIL ROTOR GEARBOX (TGB) FAILURE 
COMPONENT LIST 


COMPONENT DAMAGE 
tail rotor gearbox penetration 
O1l sight gage penetration 
magnetic plug penetration 
thermal switch sever 
streamlined tripod frame sever any one 


support will 
cause loss 
of the T/R 


B333 TAIL ROTOR BLADE FAILURE 
COMPONENT LIST 


COMPONENT DAMAGE 


tail rotor blades (13) sever 
loss of any 
one blade 
will cause 
severe vibration 
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Figure 6.2 (cont. ) 


ARE LE On. MeO ine) 
B341 LOSS OF VERTICAL STABILIZER PLANFORM AREA 
COMPONENT LIST 


COMPONENT DAMAGE 
vertical stabwigi>c: structural 
removal 
rudder structural 
removal 


B342 JAMMED CONTROL SURFACE 
COMPONENT LIST 


COMPONENT DAMAGE 
rudder mounting hinges jam/sever 
control linkages jam/sever 


B343 LOSS OF RUDDER CONTROL 
COMrONEND list 


COMPONENT DAMAGE 
cockplt contro im sever 
control linkages jam/sever 
control cable sever 
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6.3 AH- 80 Kill Tree 


Figure 
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Figure 6.3 (cont.) AH-80 Kill Tree 
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Figure 6.3 (cont. ) AH-80 Kill Tree 
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for the reader, the list has been abbreviated to only a few 
selected components from each major aircraft system. 
Redundant and nonredundant critical components are 
represented in order to provide a thorough understanding of 
component redundancy, and its effect on the vulnerability 
assessment. 

As can be seen in Figure 6.4 [Ref.1:p156], P(K/h) 
Gata for fragments is normally presented graphically as a 
function of the grain size of the fragment and the impact 
velocity. This data is obtained for the uninstalled 
component from a variety of methods varying from careful 
analysis of the individual component and its construction 
to actual live fire testing. "Numbers for P(K/h) are 
eventually assigned based upon a combination of empirical 
information, engineering judgement, and experience." 

Critical components, for the purposes of this case 
study, will be assigned a specific P(k/h) value instead of 
a function. These values are shown in Table 6.4 and are 
for the uninstalled component being struck by a 100 grain 
fragment at a striking velocity of 4000 feet per second. 
These values are for completely generic components and are 
not based on any actual data or current aircraft. They are 
presented for the purpose of conducting a vulnerability 
assessment on the AH-80 in the following chapter. The 


location of the component within the aircraft will have an 
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effect on its ultimate value for the Peobaoility of Kill 


Pivenwawhiercdsewill be illustrated in the next chapter. 
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Figure 6.4 Example P(k/h) Function 
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PABittoe6.4 CRETEICAL COMPONENT LIST 
BY MAJOR SYSTEMS GROUPING 


MAJOR SYSTEMS P(kK/h) VALUES FOR 100 
GROUPING GRAIN FRAGMENT @ 4000 FPS 
(uninstalled) 


Propulsion Systems 
Left and Right 


Left Engine 

Right Engine 

Left Inlet Duct 

Right Inlet Duct 

Left Accessory Gearbox 

Right Accessory Gearbox 
Left Engine Driveshaft 

Right Engine Driveshaft 


oOo OoO0 0000 
WWrT TN DN W W 
1 Ol 


Engine Mounts 





Left Mount Forward 0.2 
Right Mount Forward 52 
Left Mount Aft O:at 
Right Mount Aft O.1 
Pilots Control Inputs 

eyclic Os 
Collective On? 
Directional Pedals On3 
Crew 

Pilot Lao 
Fuel System Fire/Explosion 

Fuel in Forward Feed Tank 0.2 
Fuel in Aft Transfer Tank 0.3 
Fuel Feed Lines 0,2 
Engine Fuel Accessories 1.0 


1.9 


TABLE 6.4 (cont.) CRITICAL COMPONENT LIST 
BY MAJOR SYSTEMS GROUPING 


MAJOR SYSTEMS P(k/h) VALUES FOR 100 
GROUPING GRAIN FRAGMENT @ 4000 FPS 
(uninstalled) 


Flight Control System--Electrical 


Flight Computer 

Generator No. 1 

Generator No. 2 

Battery 

Wiring Channel A 

Wiring Channel B 
Longitudinal Hydraulic Assist 
Lateral Hydraulic Assist 
Directional Hydraulic Assist 
Longitudinal Servoactuators 
Lateral Servoactuators 
Directional Servoactuators 
Collective Wiring Bundle 
Directional Wiring Bundle 
Cyclic Decoupler 

Collective Decoupler 
Directional Decoupler 


oooooooo0ooo°oo°o°o 0 KF 


be eH HOUUNADAAWAAWUUWNNO 


Flight Control System--Mechanical 


Cyclic Control Rods 

Rodends 

Lateral/Longitudinal Hydraulic Actuators 
Cyclic Linkages 

Collective Control Rods 

Collective Hydraulic Actuator 
Directional Control Rods 

Directional Hydraulic Actuator 
Directional Linkages 


O1 


OoOo0O0O0000 OC 
WW WwW B&W WW 


Armament/Weapons System 


Missile Motor 0.8 
Missile Warhead FO 
20mm Ammunition Drum One7 
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TABLE 6.4 (cont.) CRITICAL COMPONENT LIST 
BY MAJOR SYSTEMS GROUPING 


MAJOR SYSTEMS P(k/h) VALUES FOR 100 
GROUPING GRAIN FRAGMENT @ 4000 FPS 
(uninstalled) 


Rotating/Nonrotating Control Interface 


Swashplate Assembly 
Torque Link 

Pitch Links 

Thrust Bearing 
Scissors Assembly 


OO0000°0 
OO AA 


Tail Boom Structure 


Tail Boom Longeron (upper left) 
Tail Boom Longeron (upper right) 
Tail Boom Longeron (lower left) 
Tail Boom Longeron (lower right) 
Vertical Stabilizer Leading Spar 
Vertical Stabilizer Trailing Spar 


oO G0 0 © 
WWM N DN HY 


Transmission System 


Main Transmission 0 
Engine Nose Gearboxes O25 
Tail Rotor Gearbox 0 


Rotor Systems 


Main Rotor Blades 

Tail Rotor Blades 

Main Rotor Mast 

Main Rotor Hub and Grip 
Main Rotor Pitch Horns 
Pitch Link Rodends 

Tail Rotor Driveshaft 

Tail Rotor Drive Couplings 
Tail Rotor Hub 

Tail Rotor Drive Links 


OO000 0000 0 
NF PRWr OOOO 


ee 1 


Vil. wAH-80 VULNERABILITY ASSESSMENT 


The final process developed in this case study will be 
the AH-80 vulnerability assessment. "A vulnerability 
assessment is the process of determining numerical values 
for the measures of vulnerability." [Ref.1:p153] This 
assessment may be carried out either by hand or by using 
several different computer programs that are available. The 
former approach will be used here. 

The type of vulnerability assessment performed depends 
upon the vulnerability measure used and upon the damage 
mechanism considered. Reference 1, pages 153-198, discusses 
these factors thoroughly, with the damage mechanisms 
ranging from nonexplosive penetrators or fragments, to 
internally and externally detonating warheads, to lasers. 
Following that material, an overview of the various 
computer programs is presented. 

An aircraft's vulnerability to nonexplosive penetrators 
or fragments can be broken down into single hit 
vulnerability, the methodology for which is presented in 
Reference 1, pages 160-169, and multiple hit vulnerability, 
the methodology for which is presented in Reference l, 
pages 169-180. This assessment of the VIPER will determine 
the aircraft's vulnerability to a single 100 grain 
fragment with an impact velocity of 4000 feet per second. 


The methodology for the assessment will be the same as 


ene 


presented for the A-20 in Reference 3 and used by the 
computer programs FASTGEN and COVART. (Ref.1:pp192-195] 

FASTGEN is a shotline generation program. In the 
shotline program 

shotline descriptions are obtained by superimposing a 
planar grid over the target model and by passing 
parallel shotlines or rays from the attack direction 
(normal to the grid) through the individual grid cells. 
One shotline is randomly located within each cell. The 
programs trace the path of a shotline through the 
aircraft and generate sequential lists of components 
and fluid and air spaces encountered along the shot- 
line. Specific component data, such as thickness and 
shotline obliquity, are also recorded. This procedure 
is repeated for all shotlines originating from the 
selected attack directions. [Ref.1:pp193-194] 

COVART is a vulnerable area routine. It generates 
component and total aircraft vulnerable area tables for a 
Single penetrator or fragment using the shotline approach 
to compute the vulnerable area. For both programs, the 
amount of output depends upon the number of aircraft 
aspects and on the size of the cell examined. Figure 7.1 
shows the 26 different aircraft aspects required for a 
detailed analysis. [(Ref.1:p182] For the VIPER assessment, 
only the "45 degree elevation and 225 degree azimuth" 
aspect will be used to showcase the methodology and not 
inundate the reader with too much information. 

As was done in Reference 3 to simulate the 
FASTGEN/COVART computer analysis, a grid with five foot by 


five foot major sections is superimposed over the AH-80 as 


shown in Figure 7.2. These sections are subdivided into 25 
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Figure 7.1 AH-80 Assessment Aspect 
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Figure 7.2 AH-80 Shotline Grid 
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equal sections measuring one foot by one foot. A shotline 
is then randomly located in only three of these one foot by 
one foot cells for the sake of simplicity. The three 
shotlines investigated are: 

1. Nonredundant components with overlap. (shotline 1) 

2. Redundant components with no overlap. (shotline 2) 

3. Redundant components with overlap. (shotline 3) 
These shotlines are depicted in Figure 7.2 and Figure 7.3. 
A fourth shotline case is possible, nonredundant components 
with no overlap; however it will not be discussed here as 
it 1s assumed by the author to be fairly straight forward 


and clear. 


A. VULNERABILITY CALCULATIONS 

Table 7.1 lists the critical components intercepted by 
the three shotlines. The presented area for each of these 
components is one square foot, the same as the grid area. 
As described in Reference 3, a subtle difference between 
the assessment technique presented there, and the 
assessment presented in Reference 1, is that in the latter 
everything is based upon component presented area, whereas 
the former is based upon the cell presented area. This 
assessment will also be based upon the cell presented area. 
The two methods will yield (cri, solutions as the cell 


size is reduced. 
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Figure 7.3 AH-80 Flight Control System Shotline Intercept 
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CRITICAL COMPONENTS INTERSECTED BY SHOTLINES 


Shotline #1 


Tail Rotor Driveshaft 
Tail Rotor Driveshaft Hangar Bearing 


Shotline #2 


N 


Lateral Channel Hydraulic Actuator 
Main Transmission 

Right Engine 

Lower Right Longeron 

Antiarmor Missile Motor 


Shotline #3 


CyeMic Stick 

Pilot 

Lateral Channel Mechanical Control Rod 
Lateral Channel Electrical Wiring 
Forward Lower Right Longeron 

Right Stub Wing Forward Spar 


Or WD 


OO S& WN F 


1. Definitions 
The following definitions were copied directly from 
Reference 3, pages 171-172 and then modified to apply to 
this case study. 


eins This subscript represents the "ith" component 
on the "cth" shotline. In this case study, 
"cl will have the value of 1, 2 or 3, depend- 
ing on the particular cell or shotline being 
analyzed. Shotline/cell 1 (11) is the aft 
shotline. Shotline/cell 2 (21) is the 
middle shotline. Shotline/cell 3 (31) is 
the forward shotline. 
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A<V_.>3 
Cl 


Bap .> and: 


A<P > 
Cc 


P<s/h,s>: 


P<k/A,;>: 


P<S/H >: 


P<K/H >: 


A<V_>3 
Cc 
A<P>3; 


P<S/H>: 


P<K/H>: 


A<V>:3 


The vulnerable area of the "ith" component on 
Piomectn uo smotline. The number that "1" re- 
presents is the number assigned to the compo- 
nent in Table 7.1. 


The presented area of each cell. As mention- 
ed earlier, this value is a constant 
at 1.0 square feet. 


The probability of the "ith" component on the 
"cth" shotline surviving, given a hit on this 
component. 


The probability of the "ith" component on the 
"cth" shotline being killed given a hit on 
this component. These values are also known 
as the installed P<k/h> values. 


The probability of the aircraft surviving 
given a hit on the "cth" cell. 


The probability of the aircraft being killed 
given a hit on the "cth" cell. 


The vulnerable area of the "cth" cell. 


The presented area of the entire aircraft. 


The aircraft probability of survival given a 
random hit on the aircraft. 


The aircraft probability of kill given a 
random hit on the aircraft. 


The total single hit vulnerable area of the 
aircraft, relative to the presented aspect. 


v2 o 


2. Mathematical Relationships 


The following mathematical relationships were 
copied directly from Reference 3 and will be used to 
determine the single hit vulnerability of the AH-80. 


are also available in Reference 1, pages 159-169. 


components 

P<S/H > 
P<s/h;> 
A<v_.> 

C1 
P<K/H > 
A<V_> 

S 
A<V> 


P<K/H> 


P<S/H> 


along a shotline and "N" cells on the aircraft 
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3. Nonredundant Components with Overlap (Shotline 1) 


The first shotline to be considered is the aft 
shotline passing through the tailboom and two nonredundant 
critical components which overlap each other. The 
methodology for this type shotline is presented in 
Reference 1, pages 163-166 and in Reference 3, pages 173- 
176. The critical components intersected by this shotline 
are again listed in Table 7.2, along with their uninstalled 
P<k/h> values. Additionally the installed P<k/h> value has 
been estimated and listed. As in Reference 3, the component 
vulnerable area in each cell (A<v_.>) is equal to its 
installed P<k/h> value because each cell's presented area 
is one square foot by definition of A<p.>. The same 


definition applies to all three shotlines. 


TABLE 7.2 SHOTLINE #1 
NONREDUNDANT COMPONENTS WITH OVERLAP 


es ee ee i). ceca 
ieee tail Rotor Driveshaft Oval: 0.075 
geeetail Rotor Driveshaft 0.4 0.35 


Hangar Bearing 


iS) 1 


The methodology for determining the vulnerability 
measures of the aircraft given a hit by shotline number one 
in cell one is now presented. 

The value for P<S/H.> is determined using equations 7.1 
and 7.2, and the vatues presented in Table 7.2. 
P<S/H|> = (1 - P<k/h,,>)(1 - P<k/h)5>) 


Once the values from Table 7.2 are substituted the 
expression becomes: 


B<S/Ha> = (ele -omog >) 1 0b a5) 


0.6013 


To determine the probability of killing the aircraft by 
the given shot, equation 7.4 is used. 


P<K/H, > =l- P<S/H, > 


1 - O08 bees 


0.3988 


The vulnerable area of cell number one can now be 
calculated using equation 7.5. 


A<V,> 


il 


(P<K/H, >) (A<P, >) 


(0.3988)(1.0 ft.7) 


0.3988 ft.° 


The value for P<K/H,> found here is relatively low 
due to the fact that very few critical components were 
intersected. This situation is obviously benificial 
regardless of whether overlap exists or not. The next 
shotline will show the effect of overlap and also the 
effect an increased number of critical components 


intersected can have on the overall aircraft vulnerability. 
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4. Redundant Components with No Overlap (Shotline 2) 


The second shotline examined is one passing through 
redundant components which do not overlap their redundant 
partner(s). This situation will be used to show the effect 
of component redundancy on the overall vulnerability, and 
to investigate the effects of cascading damage. Cascading 
damage is that damage which is secondary to the damage 
caused by the shot itself. For example, if a shotline 
intersects a redundant fuel tank, that hit alone may not 
cause the loss of the aircraft. However, if the fuel tank 
is located in such a way as to allow it to leak into the 
engine inlet thereby killing the engine, and hence the 
aircraft, the vulnerability of the tank must be looked at 
Garerfully. 

To illustrate this situation here, the redundant 
component intersected will be the lateral channel hydraulic 
assist actuator. It is redundant by virtue of the fact that 
the aircraft can be flown, using its mechanical flight 
control system, without the benefit of hydraulic assist. 
However, the actuator is located in close proximity to the 
swashplate assembly which is critical to both the 
mechanical and electrical control systems. Should the 
actuator leak hydraulic fluid which ignites and destroys 
the swashplate assembly, the aircraft would be killed. 
Following the methodology presented in Reference 3, pages 


176-181, the cascading effect "essentially creates another 


ie) 3 


critical component" which must be added to the list of 
components intersected by the shotline. This list is 


presented in Table 7.3. 


TABLE 7.3 SHOTLINE #2 
REDUNDANT COMPONENTS WITH NO OVERLAP 


i mI SS PSK) an 
Le Lateral Channel 0.8 0.75 
Hydraulic Assist 
(Redundant) 
la. Cascade effect --- 0.25 


Hydraulic fluid leakage/fire 
Swashplate kill 


2. Main Transmission Ol 0.075 

3. Right Engine On3 O75 
(Redundant) 

4. Lower Right Longeron 0.2 O 7s 

5. Antiarmor Missile 0.8 oS 
Moter 


In the first set of calculations, cascading damage 
will not be considered. Comparitive calculations will then 


be performed to illustrate the effect of redundancy. 
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The nonredundant, noncascading calculation uses all of 
the above components (1,2,3,4,and 5) yielding 


P<S/H,> lea a o) (1 = 0075) (1. —- 0.15) see (7.1) 
Gie= soma ye(l — 0.5) 
= 0.0835 
P<K/H,> =e — O20 35) see (7.4) 
= 0.9165 
A<V.> = 0.9165 ft. see (7.5) 


The noncascading situation where component redundancy 
is a factor uses only the nonredundant components 
(2,4,5) in the calculations. Thus, 


P<S/H.> =e. Ota mr —- Of15) (1 — 0.5) see (7.1) 
= 0.3931 

P<K/H,> — ae O63 931) see (7.4) 
= 0.6069 

A<V.> = 0.6069 ft. 7 see (7.5) 


These calculations make it readily apparent that in 
this situation, component redundancy has a major effect on 
the aircraft's vulnerability in this cell. Simply by having 
redundant components, P<K/H, > 1s reduced from 0.9165 to 
0.6069, a major improvement. 

In the next set of calculations, cascading damage 
will be examined. As was stated before, the existence of 
the cascading damage essentially creates another critical 
component which must be included in the calculations. This 


critical component, the swashplate, is killed 25% of the 


35 


time this cell is hit»because cfeasfitise aecseoctatean uae tHe 


leaking hydraulic fluid. 


For the nonredundant, cascading situation the following 
calculations apply using components 1,1la,2,3,4 and 5. 


P<S/H,> = (1 - 0.75) (1 - 0.25) (1 - 0.075) (1 - 0.15) 
(1 = Oma ere mos) see (7.1) 
= 0.0627 
P<K/H,> = (1 - 0.0627) see (7.4) 
= 0.9373 
A<V,> = .9373 ft.- see (7.5) 


The redundant, cascading situation uses only the 
nonredundant components (1a,2,4,5) in the 
calculations. Thus, 


P<S/H,> = (1 - 0.25)(1 - 0.075) (1 - 0.15) see (7.1) 
aie 0% 5) 
= 0.2948 
P<K/H.> = (1 - 0.2948) see (7.4) 
= 0.7052 
A<V,> = 0.7052 ft.- see (7.5) 


The effect of component redundancy is once again 
seen in the above results. Additionally, the effect that 
cascading damage can have on an aircraft is shown. For the 
redundant situation the probability of a kill given a hit 
in cell 2 rose from 0.6069 to 0.7052. This again 1s a 


Significant increase in vulnerability. 
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5. Redundant Components with Overlap (Shotline 3) 

The third and final shotline to be investigated 
passes through redundant components which overlap each 
other. This overlap raises the possibility that a single 
shot will kill both components. For this reason, equation 
7.1 must be modified as discussed in Reference 1, pages 
168-169. In essence, the probability that both are killed, 
assuming this causes an aircraft kill, is equal to the 
product of their individual probabilities of kill given 
that they are hit. Equation 7.2 must also be modified to 
include this product. To alleviate any confusion, the 
equations will be presented once again in detail. Table 7.4 
lists the components intersected by the shotline in the 
same manner as used previously. 


TABLE 7.4 SHOTLINE 3 
REDUNDANT COMPONENTS WITH OVERLAP 


ee. | —__:, ae. 
imerecyelic Stick Oc Om2 
2. Pilot 1.0 0.9 
3. Lateral Channel 0.4 OP 
Mechanical Control Rod 
(Redundant) 
4. Lateral Channel Os 0.4 
Electrical Wiring 
(Redundant) 
5. Forward Lower Right OFZ One 
Longeron 
6. Right Stub Wing Forward 0.2 oe 
Spar 


a7 


For the redundant with overlap situation, Equation 7.1 
is modified as follows 


P<S/H,> = (1 - (P<k/h.,,>) (P<k/n,,>)) (1 - P<k/h,,) 


(1 - Pekvh,,>)(1 - P<k/hg o>) (le- P<k/Rggpe 


Inserting the installed values for P<k/N 3 > listed in 
Table 7.4 yields 


P<S/H,> = (1 - (0.2)(0.4))(1 - 0.2)(1 - 0.9) (1 - 0.2) 
cea 
= (0.92) (0.8) (0.1) (0.9) (0.9) 
= 0.0596 
P<K/H,> = 1 - 0.0596 see (7.4) 
= 0.9404 
A<V,> = 0.9404 ft.* see (7.5) 


For comparitive purposes, if the shotline did not 
intersect the two redundant overlapping components, 
equation 7.1 can be used without being modified. The 
Same Situation as that of shotline number 2 would 
exist. Using only the nonredundant components 


P<S/H,>9="(1 - 002) (1 ="ORSl =SOk BREN — oF w 


(0.8) (0.1) (0.9) (0.9) 


= 0.0648 

P<K/H,> = (1 - 0.0648) see (7 
= 0.9352 

A<V..> =» 0.9352 ft.- see (7.5) 


As can be seen, the overlapping of redundant 
critical components has a definite adverse effect on the 


probability of kill given a hit. 
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6. vernal Aarcraft Survivability 
The AH-80's overall vulnerable area and probability 

of survival can now be determined using Equations 7.6, 7.7, 
and 7.8. These values are in no way intended to be 
realistic and are only presented as a means of pulling the 
assessment together in a clear, understandable manner. 

Equation 7.6 states: 

PN ee) et A Bt sg ww ee we et AXSV_> 


1 Zz N 


In an actual assessment each of (N) cells would have 

a shotline for the aspect chosen and would therefore 
have a calculated A<V_>. For the purposes of this case 
study only three cellS were chosen. Therefore, the 
overall vulnerable area is estimated as follows 


0.3988 ft.* + 0.9261 ft.* + 0.9404 £ft.* + aAcV.> 


< 
A<V> 4 


+, e or A<V yy? 


18.2 ft.° 


Equation 7.7 is used to determine the overall 
probability of killing the aircraft given that it is 
hit. Thus, 


P<K/H> = A<V>/A<P> 


MSD /A(220)) 


0.0758 


Finally, the probability that the VIPER will survive is 
computed using Equation 7.8 as follows: 


P<S/H> = 1 - P<K/H> 


Oe eos 


0.9242 
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B. VULNERABILITY REDUCTION FEATURES 
In this final section, Reference 1, pages 198-221, will 
be paraphrazed to introduce the reader to the various forms 
vulnerability reduction can take, the systems those forms 
apply to, and how it specifically applies to the VIPER. 
In review, the six vulnerability reduction concepts are: 
1. Component redundancy (with seperation) 
2. Component location 
3. Passive damage suppression 
4. Active damage suppression 
5. Component shielding 
6. Component elimination 
To some extent, all of these concepts can be seen in the 
design of the AH-80. 
1. The Flight .Gentre) .Sysem 
The principle kill modes for the flight control 
system are disruption of the control signal path and jammed 
control surfaces. To combat these, multiple, independent 
and widely seperated control paths must be used. In 
addition, jam-proof actuators and control decouplers are 
necessary. In the VIPER, the principle flight control 
system is a fly-by-wire system which decreases the 
vulnerability of the system due to its small size. Two 
relatively independent control _—— are provided, with 
each having complete authority in all modes of flight. True 


redundancy is not achieved however, due to the small size 
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of the aircraft. This was shown by the single point kill 
achieved on shotline number two. True redundancy is also 
difficult to achieve in helicopters due to the requirement 
for a rotating/nonrotating control interface, li.e., the 
swashplate and mixer assembly. This particular assembly is 
very vulnerable and can only be protected through the use 
of shielding armor and masking through its location. 
2. The Propulsion System 

The propulsion system for the AH-80 is well 
designed for true redundancy. In addition, its location and 
inlet geometry minimize the possibility of fuel ingestion 
or inlet flow distortion which can plague many fixed wing 
designs. As with any engine, combustor case perforation or 
turbine/compressor failure will kill the engine, however, 
the AH-80 is a single engine capable aircraft and the 
engines have been designed to prevent any catastophic 
damage caused by cascading effects. 

3. The Fuel System 

Reference 1, pages 203-213, describes in great 
detail the very important subject of minimizing the 
vulnerability of the aircraft fuel system. History has 
taught us that this system is probably the greatest 
contributor to fixed wing aircraft kills. The AH-80 fuel 
system, like any other helicopter's is vulnerable due to 
its location in the lower portion of the fuselage. 


Considering the VIPER's mission, this system could be a 


141 


prime target for ground fire. To reduce the vulnerability, 
passive techniques such as flexible and rigid foam can be 
used as well as various inerting systems. Active damage 
suppression techniques are used to combat fire problems. 
4. The Rotor and Drive System 
The primary kill modes for the rotor and drive 
system are a loss of lubrication and structural/mechanical 
failure. The main transmission used in the AH-80 is 
designed to maintain its mechanical integrity for more than 
30 minutes without lubrication. Both the tail and main 
rotor subsystems are designed to withstand the expected 
threat. The tail rotor drive shaft and hangar bearings 
were examined using shotline number one and found to 
provide a reasonable degree of invulnerability. 
5. The Crew System 
Crew protection through airframe, seat or body 
armor is often used for aircraft with missions similar to 
that of the AH-80. The VIPER has the power and lift 


capability for an increased crew protection system. 
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VIII. RECOMMENDATIONS 


This vulnerability assessment is by no means the final 


step in assessing the survivability of the AH-80 VIPER. 


Several follow-on steps are recommended here to provide a 


more complete and accurate assessment. 


1a 


Perform a more complete and accurate system design 
for all the systems present in the AH-80. This will 
allow a complete FMEA, DMEA, and Fault Tree Analysis, 
resulting in a more complete list of critical 
components and a more accurate shotline assessment. 


Produce a methodology addressing the multiple hit 
vulnerability of the VIPER [Ref.1:pp169-180}. 


Determine the VIPER's vulnerability to internally and 
externally detonating warheads [Ref.1:pp183-191}. 


Produce a methodology to determine the VIPER's 
vulnerability to directed high energy 
weapons. [Ref.1:pp191-192} 


Produce a case study assessing the VIPER's suscepti- 
bility. (RCS, IR radiation, etc.) [Ref.1:pp227-306}. 


Tie in both the overall vulnerability and suscepti- 
bility assessments to produce a scenario dependent 
overall survivability assessment of the VIPER. 
[Ref.1:pp311-337}). 
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